The DMZ

TildalWave

00:31

This code has nothing to do with compression at all, what makes you think that it does? — TildalWave 16 mins ago

Yea, it does. @tildalwave it makes all those Si numbers (character byte numbers for instance) into compressed form. And it does one round of extraction. — onex4 1 min ago

fair enough :))

Mike Ounsworth

@TildalWave Yeah, fair point, what the hell IS that code doing‽‽

TildalWave

Thomas Pornin

01:24

@TildalWave What a talented actor !

And, fittingly, remember that he is Canadian.

David Freitag

I really love how well this destiny game works.

David Freitag

01:45

It has pretty much never failed to load. Ever.

We are aware that some players are encountering NEWT errors and are currently investigating. Standby for updates.

Tweeted by BungieHelp on July 30, 2015 at 12:19 AM

Jeff Ferland

04:13

@Simon I think it's 6 weeks before they get full rights on the system.

tylerl

05:00

@TildalWave can someone post that reversed?

AviD

07:11

@TildalWave looks like my 2 year old, when she knows I'm about to splash her face with water.

David Freitag

07:53

seeedstudio.com/depot/Nose-LED-Kit-p-1274.html

Oh yeah, that's gotta be safe.

Rоry McCune

@DavidFreitag WTAF

David Freitag

Also, if anyone is looking into getting some custom laser cut acrylic cases made, these guys have a pretty cheap service. seeedstudio.com/service/index.php?r=lasercutting

AviD

08:10

@RоryMcCune hey cmon, I betcha @Polynomial would love one of those.

David Freitag

store.hackaday.com/collections/swag/products/1407981609

Exists? Exists. Useful? Useful.

M'vy

hey there

Is it me or skype is forging fake messages ?

AviD

@M'vy you are forging fake skype messages?

M'vy

@AviD No, I'm receiving weird message like "<Your contact> recommends <link>"

Or maybe someone found a way to spoof messages

AviD

from whom?

M'vy

08:18

from contacts in my list

David Freitag

Damn. hackaday.com/2015/07/27/…

Makes me wonder why they didn't just xray the entire 10 mile cable.

Rоry McCune

@M'vy has your contact maybe been pwned?

M'vy

@RоryMcCune it's on multiple contacts so that's weird.

Rоry McCune

@M'vy ooh that is weird then...

M'vy

@RоryMcCune And I don't recall installing anything weird these days :)

Rоry McCune

08:25

@M'vy so you're not on Windows 10 yet then?

M'vy

nope

AviD

@RоryMcCune he said "weird"

Rоry McCune

@AviD yeah have you seen Windows 10 :op

AviD

@RоryMcCune I wouldnt call it "Weird"

Rоry McCune

gotta say I'm not a fan of the user'y "send all data to MS" stuff in Cortana and edge

AviD

08:30

only "weird" in that even mac fanbois and linux neckbeards would have to love it

Rоry McCune

they keep trying to almost trick you into signing in with an MS account

AviD

@RоryMcCune curious what would happen if you add it to a domain

Rоry McCune

@AviD yeah it is interesting that, 'cause some things like OneNote API are not available hosted, you need to be using the cloud versions

AviD

all my win8 machines are connected to an MS account, but its the domain account that is the primary.

Rоry McCune

@AviD also noticed that they have an option to join "Azure AD" now

AviD

08:31

have yet to try that with win10.

@RоryMcCune oo thats cool

really though, how is that any different than your android device being signed in to google

Rоry McCune

@AviD yeah for co's that go down that line think you could get pure Office365/Azure now with no on premises servers

David Freitag

@RоryMcCune Is cortana fully disableable?

AviD

or your Chrome browser being signed in to google

@RоryMcCune fantastic

Rоry McCune

@AviD it isn't I won't do that or sign in with chrome either :)

AviD

@DavidFreitag yes. Simple, configure an unsupported location.

Rоry McCune

08:33

@DavidFreitag hmm not sure, I've not set it up and so far it hasn't asked me again but it may try and sneak in laters....

AviD

@RоryMcCune oh please. there are a ton of benefits (for either), and the downside is offset by your ability to mask it on demand.

@DavidFreitag for example cortana is not supported in Israel, so I have my location set to US. If I left it set to Israel, cortana would be non-existent and I would have regular search.

same thing on my phone.

David Freitag

That's really funny.

AviD

is it? which part?

David Freitag

Every part.

Rоry McCune

@AviD sure there's benefits as long as you're happy with a US corp. (and their partners) processing your data :)

AviD

08:41

"data"

Rоry McCune

and potentially (if MS lose their current court case on the topic) any other US corp. who can get a court order

@AviD have you seen what data cortana asks for access to?

AviD

yes.... and do you have an idea what data Windows itself has access to? ;-)

Rоry McCune

@AviD sure has access to is different than "transmits to another place as part of the service"

AviD

ah see

Rоry McCune

if windows surreptitiously transmitted personal data to the US without informing the user they would be in a world of pain, when they got caught. With this it's part of the operation of the system, so it's all good

on another note see @ColinCassidy is getting some press dailydot.com/politics/…

Nuclear power station takeovers are fairly headline worthy...

Colin Cassidy

08:45

@RоryMcCune all aboard the hype train (woo-woo)

David Freitag

@RоryMcCune Ooh how exciting.

Rоry McCune

@ColinCassidy well I wasn't going to call it that ... but after the gun thing yesterday, you needed something to one-up them..

David Freitag

@RоryMcCune No, I think the word you are looking for is terrifying.

Colin Cassidy

yeah, we're all bored with cars and guns, lets go BIG

Rоry McCune

@DavidFreitag I have a feeling that this years BH/DC/B-Sides is going to be fairly scary all round....

David Freitag

08:47

@RоryMcCune Good thing I've been holding onto my butt in preparation.

AviD

I think its time to dust off that old question about hacking satellites.

Rоry McCune

"The specific vulnerabilities get attention; but the fact is, whenever Eireann and Colin look for something, they find it. It doesn't take them as long as it should to find these things. A lot of these are low hanging fruit that have huge impacts."

"All these vulnerabilities are pervasive and endemic,” Leverett explained. “Most vendors haven't done the basics."

cheery picture that paint's eh!

David Freitag

@RоryMcCune What? I can't hear you through this bucket of sand.

Colin Cassidy

@RоryMcCune this is sadly true, I started this project as a learning exercise in reverse engineering... I've not had to do a lot to find what we found

Rоry McCune

@ColinCassidy disappointing indeed, and the comments from industry of "oh we didn't know about this stuff 4-8 years ago" just ain't true, people knew about hardening then...

it's just "eh we didn't want to pay to do things right back then"

Colin Cassidy

08:54

@RоryMcCune unfortunately that's what it boils down to.

David Freitag

Oh this is cool.

vimeo.com/111388356

Rоry McCune

pki.io/#downloads <-- LOL

PKIs meet .io domains..

AviD

09:25

@DavidFreitag TWSS

@ColinCassidy sadly, that's usually the case

Adi

Whoa! @Simon I didn't know you make music!

http s://www.youtube.com/watch?v=Zbg6lwq5yS4

David Freitag

@Adi He actually does though.

AviD

@DavidFreitag if you heard it, you would be saying "I thought you made music"

Colin Cassidy

10:07

is it a bad sign when a "Cyber/Data Security legal" person starts to follow you on twitter? Asking for a friend...

Rоry McCune

@ColinCassidy heh I think they're on a roll, I had one of those follow me today too....

Colin Cassidy

excellent I'm looking forward to the special search when I enter the US

Rоry McCune

@ColinCassidy oh yeah, after stories about cyber-terrorism and nuclear power stations, you'll be on for the top-level... what's your arrival airport in the US?

my experience was that Vegas wasn't that bad (they're used to foreigners) but some of the others, not so good

AviD

@ColinCassidy well its definitely better than having a "Cyber/Data Security illegal"

David Freitag

@AviD Boo your jokes suck this morning.

AviD

10:18

@ColinCassidy when they ask what you do and why you're there, make sure to tell them "to hack nuclear plants". Make sure you use a lot of technical details.

snaaap! I can hear those latex gloves from here.

David Freitag

@AviD "Look, ma'am, I don't hack nuclear plants with my butt."

AviD

@DavidFreitag though it is afternoon, I am just now sitting down for work. Car was on strike this morning, had to deal with that :@

David Freitag

@AviD That sucks :[

AviD

@DavidFreitag heh, "ma'am", as if it wouldnt be 3 big hairy guys name Chuck.

David Freitag

@AviD I'm trying to turn that into a TWSS in my head, but it just isn't working.

AviD

10:22

hehe

Rоry McCune

David Freitag

@RоryMcCune That kid is having sooooo much fun right now

AviD

hehe

Rоry McCune

it's the look of pure fear

hillarious

AviD

@RоryMcCune even hysteria

David Freitag

10:30

@RоryMcCune Fear, fun, the lines are pretty blurry.

Rоry McCune

kid'll either get over it and grow up a driver, or never get in another car...

AviD

or never trust his parents again

Rоry McCune

heh it's like the Elder Rory who's stated goal is to get any first time passengers in his car to scream...

by going round things sideways

David Freitag

@RоryMcCune I'd like to go on that ride.

3

AviD

@RоryMcCune without even starting the engine

Rоry McCune

10:34

dailymail.co.uk/news/article-3179787/… < -- "not Top Gear" Signed to Amazon...

AviD

some of you might enjoy this. dorkly.com/post/74122/…

David Freitag

@RоryMcCune YEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEES

AviD

for me, that is more a sign of how annoyed I am about wasting the day on the car.

David Freitag

@AviD Eww shitty cover.

@AviD Perhaps you should build one of these. You can melt anyone in your way. hackaday.io/project/1023-low-cost-co2-laser-build

AviD

How to Make Your Own Reddit-Themed Cocktail

►

/cc @RоryMcCune @Simon and other redditors

ow OW EWW EWWW EWWW

thats what happens when I share a link before I finish watching it

David Freitag

10:43

God that guy is a giant

AviD

wait for it

David Freitag

lol

"You'll barely notice it"

Colin Cassidy

10:59

@RоryMcCune flying directly into Las Vegas, never had problems before, except loooong queues at passport control

AviD

you should get a US passport. Slightly less looooong queueues.

Rоry McCune

11:19

@ColinCassidy ah well you should be ok there, or at least there'll be a slot machine in the interrogation waiting room

TildalWave

had to cull it to remove every other frame, it was getting too big

AviD

11:40

looks the same

Rоry McCune

raz

Well played @RоryMcCune

AviD

@RоryMcCune Shame. Shame on you.

Rоry McCune

I found /r/dadjokes/ reddit.com/r/dadjokes/top/?sort=top&t=all

Terry Chia

Bitcoin: it’s like MongoDB, but for money

Tweeted by bascule on July 29, 2015 at 8:57 PM in reply to bascule

Simon

12:32

@Adi The fact that you removed the embedding makes me doubt that I should open it at work.

raz

@Simon He probably just didn't want you see the preview

Rоry McCune

If Canadians Made A Rap Diss Video

►

Simon

o

Thomas Pornin

@DavidFreitag It was an underground cable; I suppose that, to do the X-ray, you had to remove the earth around the cable. 10 miles cable -> 10 miles trench -> expensive.

Rоry McCune

@Simon sorry ... :op

Simon

12:44

How's the Win10 life lads, any blue screen yet?

Rоry McCune

@Simon not yet.. grahpics drivers a little funky, though working. Fans on my desktop seem to be spinning up a bit more, so may need some updated drivers there

Thomas Pornin

1

Q: Diffie Hellman parameters still calculating after 24 hours

I have a fresh install of Arch Linux on a RaspberryPi model B. I'm setting up OpenVPN and using easy-rsa to generate initial keys and certificates. All went fine until I ran ./build-dh. It is now 24 hours later and the script is still running. I have previously configured OpenVPN on other devic...

Rоry McCune

I have a feeling tho' that to get the best out of it, you need to log into an MS account...

Thomas Pornin

This is an exact duplicate, imported from SO.

The fun part: the OP calls his questions "tickets".

Xander

@Simon No blue screens for me. I'm happy with it so far. RTM is way more stable for me than the earlier builds were, which is nice. They didn't blue screen for me either, but got a bit weird from time to time.

Simon

12:47

@Xander Reading the manual is more stable?

Silly Windows.

@RоryMcCune Oh the joy of drivers.

Xander

@Simon Or GA build, if you prefer. Or Gold. Whatevs.

Flyk

so... Windows 10 is broken already

I made my start menu all pretty with lots of little icons and now they're all rendering broken

lively in here today

Simon

@@@

David Freitag

13:05

@ThomasPornin I suppose that's true, but they spent $75M on the time alone. I think a trench might be less.

Also, there was a maintenance tunnel around the cable.

Flyk

@Simon OTHER THAN MY START MENU PROBLEM I HAD AN ISSUE WITH MY GRAPHICS CARD BEING UNINSTALLED IMMEDIATELY AFTER THE UPGRADE BUT I JUST REINSTALLED THAT

oh... caps

-.-

Xander

@Flyk Have you tried turning it off and on again?

David Freitag

@Flyk You could, you know, edit it.

Xander

@Flyk And thanks for your vote!

Simon

@Flyk That sounds lovely.

Flyk

13:08

@Xander I restarted explorer and that was sufficient

@DavidFreitag cba

@Xander you're welcome

commiserations for being beaten by ... actually I don't even know who most of the candidates were anyway

or care

@Simon ironically it had no problem finding a driver for my far less generic audio hardware

Simon

@Flyk Sigh.

Flyk

just didn't seem to be able to do anything for a nvidia graphics card

no crashes though

obviously Cortana is disabled

Simon

cortanuh

Rоry McCune

@Flyk hells yeah "please give me access to your whole digital life , so I can help you!"

... I don't think so.

Flyk

@RоryMcCune well, let's be fair, all of that information is required in order for an application like that to work

it's just... Microsoft...

who really trusts an American company that much?

Rоry McCune

13:16

@Flyk exactly, which is why I avoid that, and siri and gogle now...

@Flyk s/american/any/

Thomas Pornin

@Flyk It seems that there has been an issue with Nvidia drivers.

The auto-update mechanisms of Windows, and of the Nvidia things themselves, were trying to install distinct versions, so the machine kept on swapping drivers, and finally died.

Flyk

@ThomasPornin I didn't get the fighting between Windows Update and Geforce Experience

Simon

Because, as we all know, there aren't enough Nvidia GPU around so they couldn't test them.

Flyk

it just said I had a generic display adapter after first boot

David Freitag

@Flyk That makes perfect sense.

Flyk

13:22

The main problem was my PC was briefly ugly to look at

David Freitag

The nvidia card will have several drivers/versions that would be compatible, whereas the audio stuff would be easily identifiable.

@Flyk Did you do an upgrade or a clean install?

Flyk

upgrade

David Freitag

ew

Flyk

cba reinstalling

Simon

ew

Flyk

13:24

that's like 4 years of redownloading and reinstalling

Simon

I wonder if it'd be a good idea to upgrade my Win7 VM.

David Freitag

That's why you use more than one internal hard drive

Flyk

I have four

all ssds

Simon

She has 4

Flyk

it changes nothing

Simon

13:24

all ssds

David Freitag

In a raid presumably

@Flyk I have windows on one SSD and all of my data either on nas or on a separate hard drive. Wiping and reinstalling windows takes very little time and I am back up and running again in only a few hours.

Rоry McCune

@DavidFreitag I bet you have decent Internet access for all the updates though

David Freitag

@RоryMcCune I have 150mb/s service

raz

@DavidFreitag Nice, I'd have to pay an arm and a leg for that kind of speed.

Rоry McCune

@DavidFreitag yeah that makes the whole on the fly rebuild somewhat more tenable....

Rory Alsop

13:36

@RоryMcCune It has been great fun. Still topping my list was Jenny...

Rоry McCune

@RoryAlsop And bottom was Evong, when he tried to pull the handbrake?

Rory Alsop

@RоryMcCune hahahahaha - Oh, I had forgotten that

Flyk

14:19

@DavidFreitag but do you have several hundred GB of software that doesn't like being transferred and is much happier if it has been installed that can only be installed by downloading it from a relatively slow service that doesn't max out my internet?

seems like effort that can be avoided

Adi

@raz Nah, I just wasn't sure if it's SFW or not

Rоry McCune

-1

A: Persistent XSS in Blogger domain

Keyloggers in JavaScript... BeEF injection string (a JavaScript string to allow BeEF to "hook" the browser..." Also.... you can redirect them to www.myevilsite.org (we're an organization ya know.. we've incorporated...) and do whatever they want to you SOP or not and return you right back to the...

^oh dear

raz

@RоryMcCune Yeah

-1

A: Can data be forensically retrieved off an encrypted hard drive?

Any data that is encrypted with publicly available encryption can be decrypted... otherwise I can assure you that it such encryption algo's would not be available to the public. For the "every day user" there are no options for encryption that are not able to be broken. Our government would not a...

Rоry McCune

oh dear, oh dear

David Freitag

14:34

@Flyk I have a 2TB internal drive nearly full and 3Tb of my 6TB nas filled.

raz

@RоryMcCune "I worked in software development for 20 years and have spent the last 4 or 5 in the Application Security/Pen Tester space, focused on web and mobile applications. I have various developer and security certifications from Microsoft, Fishnet/7Safe, InfoSec, etc..."

David Freitag

@raz I pay $40/mo

raz

@DavidFreitag For 150 up/down?

David Freitag

@RоryMcCune This is why you download the service packs.

Rоry McCune

@raz yeah I read that, it makes me shudder

David Freitag

14:35

@raz No, 150 down and I think 70 up

raz

@DavidFreitag Still... damn good price

Simon

I pay 45 for 10 down 2 up

125 gb limit

raz

@Simon I pay about $45 for 75 up/down unlimited

David Freitag

Plus basic television, no HD and only like 30 channels

TildalWave

@RоryMcCune only that you can piano a tuna (make it soft and quiet) :)

not if you're the Swedish chef tho

David Freitag

14:39

@raz that was from my wifi

At 2am I can get that to hit 180mb/s

Simon

At 2 AM I probably hit 11

TildalWave

@Simon was this a Spinal Tap joke?

Simon

spinal wat

TildalWave

Up to eleven

"Up to eleven" or "these go to eleven" is an idiom from popular culture, coined in the movie This Is Spinal Tap, where guitarist Nigel Tufnel proudly demonstrates an amplifier whose volume knob is marked from zero to eleven, instead of the usual zero to ten. The phrase has come to refer to anything being exploited to its utmost limits, or apparently exceeding them. Similarly, the expression "turning it up to eleven" refers to the act of taking something to an extreme. In 2002 the phrase entered the Shorter Oxford English Dictionary with the definition "up to maximum volume". == Original scene... ==

Simon

@TildalWave Not bad, I like this reference.

Transcript for